Set Up Two-Factor Authentication on an Account

This article will walk you through how to set up Two-Factor Authentication for an account. When you enable Two-Factor Authentication with the new sign-in, you will have to use your password and a verification code (from an authenticator app) to successfully log in.

Important Notes

• Two-factor authentication has changed from email to authenticator apps in the new sign-in.

• CivicPlus recommends that every user enables Two-Factor Authentication to provide enhanced security. This industry-standard security convention requires users to use both their password and a secondary form (Authenticator app) to prove their identity at sign-on, hence the term two-factor.

• To remove two-factor authentication from an individual account, the user will need to contact Support. Support will also need an email confirmation from the user confirming that they would like 2FA removed from their account.

Instructions

1. Log in to the system

2. Navigate to the Password & Security tab

3. Click Add/Setup Authenticator App under the Two Factor Authentication section

4. Follow the instructions to configure an authenticator app by opening or installing any time-based, one-time passcode (TOTP) app on your desktop or mobile device, adding the authenticator key using the QR code or copy-paste, entering the unique code generated for you by the app, and selecting Verify

   • Examples of TOTP apps:

     • Microsoft Authenticator

       • Android

       • iOS

     • Duo Mobile

     • Google Authenticator

     • LastPass

     • Twilio Authy

     • Browser-based options like Authenticator.cc

5. Save the presented list of Recovery Codes in case you ever lose access to the app

6. Signing in will require the time-based, one-time passcode every time you sign in